PT-2025-47750
CVE-2025-66081
·
Published
2025-11-21
·
Updated
2025-12-14
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Jeff Starr Head Meta Data versions prior to 20250328
Description
The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting (XSS) issue. This allows for Stored XSS attacks. The affected component is Head Meta Data head-meta-data.
Recommendations
Update Jeff Starr Head Meta Data to a version later than 20250327.
Found an issue in the description? Have something to add? Feel free to write us 👾